Encryption

All your reflections are transmitted over TLS and stored encrypted at rest in our database. Only your authenticated session can read your data.

Your data is never used to train AI

Synecto sends your conversations to OpenAI for processing. OpenAI does not use this data to train its models, and we never train any models on your data ourselves. Only the text of each session is saved. Your reflections are yours.

EU-built, GDPR-compliant

Synecto is built in Ireland by Synect Limited (CRO: 814346). We're an independent company — no investor pressure to monetise your data. We comply with GDPR, including your right to access, export, correct and delete your personal data.

What we collect

The minimum needed to make Synecto work:

Your email address (for sign-in and verification)
Your reflections (the text messages you write)
Insights extracted from your reflections (values, beliefs, goals, etc.)
App preferences (theme, language)

We don't track you across the internet, we don't use third-party analytics on the app, and we don't sell or share your data with anyone.

Email verification

Every 14 days, Synecto asks you to verify your email with a 6-digit code. This makes sure your account stays in your hands and isn't being silently used by someone else.

Biometric app lock

On iOS and Android, you can require Face ID or fingerprint unlock to open Synecto. This means even if someone has your unlocked phone, they can't see your reflections.

Data export and deletion

You can export all your data as JSON anytime from Settings. You can also permanently delete your account and all associated data — sessions, profile insights, habits, everything — with one tap.

Sub-processors

Synecto uses these trusted vendors:

Supabase — database and authentication (AWS eu-west-1, Ireland)
OpenAI — AI conversation and insight extraction (API only; not used to train its models)
Brevo — transactional email delivery (verification codes only)
Cloudflare — global CDN and DDoS protection
Expo / EAS Hosting — web app hosting
Usercentrics — cookie-consent management (this website)
Google Analytics — consent-gated website analytics (this website)

The full, authoritative list of sub-processors is in our Privacy Policy.

Safety & crisis support

Synecto is built for reflection, not crisis care. If a conversation touches on self-harm or suicidal thoughts, the AI is instructed to set the reflection aside, respond with warmth, and point to real-world support — and it will never provide harmful information.

If you or someone you know needs support right now: 112 (EU emergency services) · Samaritans 116 123 (free, 24/7) · Text About It — text HELLO to 50808 (Ireland). Outside Ireland, findahelpline.com lists local services.

Reporting a security issue

If you find a security vulnerability, please email hello@synecto.io. We'll acknowledge within 72 hours and work with you in good faith to resolve the issue.

Your reflections, protected.